Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File:                     YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier:          uNTzDAG5efAhCjV7Jq6tOFyrOCvsEMpH3+vG3YeooJQ=
Subject key identifier:   59:83:F8:A7:2A:44:63:6E:94:AE:FB:6B:19:91:12:72:1D:D3:F5:50
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer:       /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial:       01A0404E15A3D40BE7BD1C2A25E62D0613EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number:          1A22
Signing time:             Wed 26 Aug 2026 23:00:54 +0000
Manifest this update:     Wed 26 Aug 2026 23:00:54 +0000
Manifest next update:     Thu 27 Aug 2026 23:00:54 +0000
Files and hashes:         1: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: AVIPLhQBBMhoziwRqX2oeBKCgvwQZ1h2TaBTBss+D2g=)
                          2: zk24Xibi_69XM4miradQH_-zfVo.roa (hash: 8vWhGhRcVD9hGye0zCP9w/L6uhcw5ZBizDAK5O4GtQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:4e:15:a3:d4:0b:e7:bd:1c:2a:25:e6:2d:06:13:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
        Validity
            Not Before: Aug 26 23:00:54 2026 GMT
            Not After : Aug 27 23:00:54 2026 GMT
        Subject: CN=5983f8a72a44636e94aefb6b199112721dd3f550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e2:73:19:83:8d:4f:03:bf:ae:75:f2:b8:d7:
                    21:e5:31:70:66:ed:57:5e:94:af:c2:39:63:16:0e:
                    e6:05:07:81:b2:e7:4c:cb:db:90:4c:1c:e5:27:4f:
                    ee:a9:ac:ac:79:8d:ea:94:ed:f7:42:78:54:e1:5e:
                    f4:15:38:6c:8e:07:47:0a:aa:1d:91:22:25:fc:5e:
                    32:20:ce:87:f3:1e:f0:e8:ac:53:c7:67:22:69:55:
                    ba:a7:e8:24:bf:5a:2d:11:9c:c9:37:3d:40:9f:69:
                    8c:40:65:86:06:d5:e0:96:49:ae:82:25:13:5e:08:
                    b9:4f:f9:45:de:f2:99:e6:f2:1a:6f:c3:a5:5f:d0:
                    25:6f:ef:30:5f:ec:8c:d3:c6:36:fa:25:7b:e3:5e:
                    1f:94:6d:3c:58:36:fd:47:8a:3a:aa:82:bb:1f:66:
                    d1:c7:b2:c0:96:6d:c0:b6:95:2c:a5:58:84:d9:60:
                    6b:51:d3:d4:20:19:1c:54:4b:2a:c9:c3:0d:f3:0e:
                    8f:ee:7f:9f:5f:b5:8b:af:8c:b6:0e:d3:81:ff:d0:
                    71:8f:1d:f1:97:d7:1b:31:a6:0d:f1:38:ef:9d:a8:
                    de:7e:c5:ef:6e:5a:15:e8:4c:a3:fa:cc:ae:0b:88:
                    9f:10:9d:3f:62:3f:39:2d:93:b6:8a:17:c1:82:46:
                    f9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:83:F8:A7:2A:44:63:6E:94:AE:FB:6B:19:91:12:72:1D:D3:F5:50
            X509v3 Authority Key Identifier:
                keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:8f:57:a6:66:3f:96:17:2b:2a:6f:05:9f:88:39:39:ad:ba:
         0c:0d:11:30:0e:6c:e5:63:8b:67:ca:19:4b:20:0b:26:b5:7e:
         a2:1a:da:87:fb:89:e2:4c:6e:bd:c0:fe:1a:cd:c6:58:eb:f7:
         1f:c4:6a:3b:2e:94:9d:7f:8c:00:d5:61:29:b9:a0:42:69:b6:
         c0:76:fc:57:a3:48:dc:3d:1d:14:67:b9:58:bd:25:37:eb:79:
         79:2c:08:5d:21:9c:3d:55:95:50:72:9d:52:a6:3e:f2:fd:34:
         67:a1:aa:f6:77:3b:f1:c5:87:3c:bc:75:3a:96:5b:e0:80:11:
         d9:ef:d2:24:d0:87:71:1d:0f:14:6a:f3:5b:80:4b:f8:f8:92:
         c5:68:83:ca:3d:28:50:8b:9a:e2:f2:b3:f2:4e:75:c2:61:d4:
         f3:12:8a:7b:fd:51:cc:7f:52:85:86:92:93:b9:80:bd:4f:36:
         f9:29:e7:48:68:6d:f4:bc:95:e8:63:3e:e8:d8:f6:ff:fb:1b:
         d4:23:7a:d9:04:e9:01:37:7a:3f:fc:8b:f0:2d:3f:4d:3c:70:
         40:1d:50:fc:39:ab:93:5a:db:d2:df:fd:71:60:24:a5:68:ab:
         b8:57:9d:0b:c6:f7:4a:c1:b1:53:fb:61:a5:00:91:cb:ca:57:
         8b:df:48:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:03:44 2026 by rpki-client